A SECURE NETWORK AND METHOD OF ESTABLISHING 


COMMUNICATION AMONGST NETWORK DEVICES THAT 
HAVE RESTRICTED NETWORK CONNECTIVITY 


5 ABSTRACT OF THE DISCLOSURE 

A secure network is provided which includes a plurality of anti- 
bubbles having a plurality of anti-bubble partitions. Each anti-bubble partition 
has at least one network device configured to transmit and receive data. All the 
network devices that belong to or correspond to a particular anti-bubble have 

10 the same network security policy. Data may not be transmitted between two 
network devices in the same anti-bubble or two network devices in different 
anti-bubble partitions of the same anti-bubble. The secure network also 
includes a plurality of network control points, which has one or more network 
control point devices having at least one interface. Each anti-bubble partition 

15 is connected to at least one network control point. The network control point is 
used to provide a connection between at least two network devices. Each 
network control point device is configured to enforce the network security 
policy of all the anti-bubbles that are connected to it. During the transmission 
of data from one network device to another network device, one or more 

20 network control points are traversed. 
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